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Introduction 


In  [3]  Moore  and  Shannon  obtain  some  basic  results  concerning 
the  reliability  of  two-terminal  networks  composed  of  independent 
components  of  equal  reliability.  In  particular,  they  show  that  the 
reliability  of  the  network  plotted  as  a  function  of  the  component 
reliability  is  S-shaped,  i.e,  crosses  the  diagonal  at  most  once  and 
always  from  below.  In  [1]  Birnbaum,  Esary,  and  Saunders  generalize 
the  results  of  Moore  and  Shannon  to  what  they  call  coherent  structures 
a  coherent  structure  being,  roughly,  one  whose  performance  does  not 
deteriorate  when  failed  components  are  replaced  by  functioning  ones. 
Coherent  structures  include  two-terminal  networks,  ”k  out  of  n” 
structures  (structures  which  function  if  and  only  if  at  least  k 
out  of  n  components  function),  and  many  others.  In  [1]  it  is 
assumed,  just  as  in  C3]»  that  components  are  independent  and  of 
identical  reliability. 

In  the  present  paper  we  shall  exploit  a  basic  theorem  on  the 
covariance  of  increasing  functions  of  random  variables  which  permits 
us  to  discuss  the  case  of  coherent*  structures  whose  components  are 
independent,  but  of  differing  reliabilities.  We  obtain  first  some 
convenient  bounds  on  the  reliability  of  structures,  then  a  generali¬ 
zation  of  some  statistical  properties  obtained  in  [1]  for  coherent 
structures,  and  finally  a  generalization  of  a  differential  inequality 
introduced  in  [5]  which  relates  structural  and  component  reliabilities 
One  of  the  consequences  of  the  present  approach  is  a  very  simple  and 
direct  demonstration  of  the  S-shapedness  results  presented  in  [3] 
and  [1], 
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2.  Backgroimd  and  notation 

The  systems  (or  structures)  we  consider  are  capable  of  only  two 

states  of  performance;  either  they  function  or  they  fail  to  function. 

Similarly  the  components  from  which  the  systems  are  built  may  function 

th 

or  fail  to  function.  We  associate  with  the  i  component  of  a  system 
a  binary  variable  with  =  1  when  the  component  functions  and 

x^  =  0  when  the  component  fails.  The  state  of  the  entire  set  of  com¬ 
ponents  of  the  system  is  indicated  by  the  vector  x  =  . ,x^) . 

The  number  of  components  n  is  called  the  order  of  the  system.  It 
is  assumed  that  the  state  of  the  system  is  determined  by  the  states 
of  the  components,  so  that  the  state  of  the  system  may  be  indicated 
by  a  binary  function  ^(x)  with  4)(x)  =  1  when  the  system  functions 
and  ^(x)  =  0  when  the  system  fails;  ^  is  called  a  structure 
function. 

Within  the  class  of  binary  systems  of  binary  components  we  are 
particularly  interested  in  those  that  are  coherent.  A  system  having 
structure  function  ^  is  coherent  if: 

(a)  <)(x)  >  4)(y)  whenever  x  >  ^,  where  by  x  ^  mean 

\  >  y^,  i  =  1,2,... ,n 

(b)  <)(1)  -  1,  where  1  =  (1,1,. ..,1) 

(c)  <)(0)  =  0,  where  0=  (0,0,..., 0). 
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Functions  f(x)  (binary  or  otherwise)  which  satisfy  property  (a) 
will  be  called  increasing.  A  structure  function  which  is  increasing 
has  been  called  [1]  semi^coherent.  It  is  immediate  that  the  only  semi- 
coherent  systems  which  are  not  coherent  are  the  two  trivial  cases 
4)(x)  5  1  and  ()(x)  =  0,  The  increasing  property  of  coherent  systems 
seems  descriptive  of  many  real  systems  —  if  sufficient  components  are 
functioning  to  cause  the  system  to  function,  then  the  functioning  of 
additional  components  can  only  improve  matters}  if  sufficient  components 
have  failed  to  cause  system  failure,  then  the  failure  of  additional 
components  can  only  make  matters  worse. 

In  considering  the  reliability  of  systems  we  will  suppose  that 
each  component  functions  with  a  certain  probability.  This  is  equiva¬ 
lent  to  associating  to  the  i^*^  component  a  binary  random  variable 
X^,  where  p^  =  Pr[X^  =  1]  =  ECX^]  is  the  reliability  of  the 
component,  and  =  1  -  p^  =  Pr[X^  =  0]  is  component  "unreliability^*. 
The  reliability  h(p)  of  the  system  is  then 

h(p)  =  Pr[<l)(p  ^  l|p]  =  E[<)(X)|p], 
where  p  =  (p^,P2, . ••,?„)• 

A  coordinate  x^  of  a  vector  of  binary  variables  x  is 
inessential  to  a  function  f(x)  if 


f(l^,x)  =  f(0.,x) 
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for  all  vectors 
(l^,x)  =  (x^ 
(O^^x)  =  (x^ 
(•^»x)  =  (x^ 


where 

t 

,...,Xi^l,«,Xi^l 


» • • • 


I • • • ) 


When  the  function  is  the  structure  function  of  a  system  an  inessential 
coordinate  corresponds  to  a  component  whose  functioning  or  failure 
does  not  affect  the  performance  of  the  system.  Any  coordinate  which 
is  not  inessential  to  f  is  called  essential  to  f. 


A  vector  x  for  which  a  structure  function  ^(x)  =1  is  a  path 
of  the  system  represented  by  (),  If  ^(x)  =0,  x  is  a  cut ,  When  the 
system  is  coherent,  the  coordinates  of  a  path  which  are  one  indicate 
a  set  of  components  which  by  functioning  are  sufficient  to  cause  the 
system  to  function;  the  coordinates  of  a  cut  which  are  zero  indicate 
a  set  of  components  which  by  failing  are  sufficient  to  cause  the 


system  to  fail 
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3«  Covariance  of  increasing  functions 

A  key  tool  in  our  analysis  of  structural  reliability  is  a  specialized 
version  of  the  Tchebichev  inequality  [2]  stating  that  the  covariance 
of  two  increasing  functions  of  independent  binary  random  variables  is 
non-negative,  A  proof  adapted  to  this  particular  case  is  not  readily 
accessible  in  the  literature.  One  is  given  here  that  is  an  immediate 
consequence  of  a  useful  representation  for  the  covariance  of  two  functions 
of  independent  binary  random  variables. 

If  are  binary  variables,  then  for  any  function  f(x) 

the  representation 

(3.1)  f‘(x)  =  x.f(l.,x)  +  (1  -  x.)f(0.  ,x) 

holds  for  each  i  =  l,2,.,,,n.  Let  be  independent  binary 

random  variables.  Since  X^  is  independent  of  f(l^,X)  and  f(0^,X) 
the  representation 

(3.2)  Ef(X)  =  p,E[f(l.,X)]  +  q.E[f(0.,X)] 
then  follows  from  (3.1). 

Lemma  3.1 

Let  X^,X2,...,X^  be  independent  binary  random  variables.  For 

any  functions  f.(X)i  j  =  X. 

3  ^ 

cov[f^(X),f2(X)]  =  •  cov[f^(l^,X),f2(l^,X)] 

+  q.  .  cov[f  (0. ,X),f_(0. ,X)] 

1  1  X  -  2  1  — 


"  i’i'li  •  -  f^^o^.x)]  •  ELf^d^.x)  - 
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Proof 

From  (3.2) 

ECfj^Cpf^CX)]  =  •  E[fj^(0^,X)f2(0^,X)] 

E[fj(X)]  =  •  ECfjd^.X)]  +  .  E[fj(0^,X)],  j  =  1,2 

Using  these  expansions  the  representation  of  the  lemma  is  easily  checked 
when  each  covariance  involved  is  written  in  the  form 
covCf^^f^]  =  ECf^f^)  -  E(f^)  •  ECf^). 

Theorem  3>1 

Let  be  independent  binary  random  variables.  Let 

fj(X),  j  =  1,2,  be  increasing  functions «  Then 

cov[f^(p,f2(X)]  >  0. 

Proof 


We  proceed  by  an  induction  on  the  order  n  of  the  functions. 

For  n  =  1,  from  Lemma  (3.1)» 

cov[f^(X^),f2(X^)]  =  p^q^  •  [f^(l)  -  f^(0)]  .  [f^d)  -  f^CO)], 
an  expression  which  is  clearly  non-negative  for  increasing  f^  and  f^. 

Assume  that  the  covariance  of  any  two  increasing  functions  of 

order  n  -  1  is  non-negative.  If  f.(X),  j  =  1»2,  are  increasing 

<3 

and  of  order  n,  then  the  related  functions  fj(l^iX)i  j  = 

are  all  increasing  and  of  order  n  -  1,  Thus  the  first  two  terms  of 

the  representation  of  Lemma  3.1  non-negative.  Since 
fj{l^,X)  >  j  “  t  iird  term  of  the  same  represents- 
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tion  is  also  non-negative. 

Corollary 

Under  the  hypotheses  of  Theorem  3.1  and  the  additional  assumption 
that  0  <  p^  <  1  for  each  i  =  l,2,,,.,n,  a  necessary  and  sufficient 
condition  for 

cov[f.(X),f  (X)]  >  0 

is  that  some  variable  be  essential  to  both  f^  and  f^* 

Proof 

If  no  X.  is  essential  to  both  f,  and  f  ,  then  f.  (X)  and 
1  1  2  1  “ 

f2(X)  are  themselves  independent  random  variables  and  their  covariance 
is  zero. 

On  the  other  hand  suppose  some  x^  is  essentiail  to  both  f^  and 
f^.  From  Lemma  3.1  cov[f^(X) ^f^CX)]  can  be  expanded  about  this 
particular  variable.  We  shall  show  that  the  third  term  of  this  expansion 
is  strictly  positive.  That  x^  is  essential  to  both  functions  means 
that  there  exists  vectors  i  such  that 

Then,  letting  P(*.,x)  =  TTpCX.  =  x^], 

^  ■  k/i 

E[f.(l.,X)  -  f.(0.,X)]  =  I  [f.(l.,x)-  f,(0.,x)]  P(-.,x) 

J  l’-  J  X  J  l’-  j  l’-  1^- 

>  [f  (l.,x^^^)  -  f.(0. P(-.,x^^^)  >  0, 

J  ^  J  ^  ^ 

for  j  =  1,2,  Since  also  ^  0,  the  third  term  is  indeed  strictly 


positive. 
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4.  Approximations  to  reliability 

We  shall  develop  some  convenient  upper  and  lower  bounds  on  the 
reliability  of  coherent  systems  whose  components  are  independent  but 
not  necessarily  of  the  same  reliability.  The  following  three  lemmas 
will  be  useful. 

Lemma  4.1 

Let  be  independent  binary  random  variables.  Define 

f.(X)  =  TT  X . ,  where  A.  is  a  subset  of  l,2,...,n  ,  j  =  l,2,...,m. 

J  -  l.Aj  3 

Then 

(4.1)  P[fj^  =  0,...,f^  =  0]  >  PCfj^  =  0,...,f^  =  0]  •  =  0,...,f^  =  0] 

for  r  =  l,2,...,m. 

Proof 

Define 

0  if  each  f^  =  0,  j  =  l,2,...,r 
1  otherwise 

0  if  each  f.  =  0,  j  =  r+l,r>2, . . . ,m 

J 

1  otherwise 

■-  D 

Thus  F  =  1  -  IT  (1  -  f  J,  F  =  1  -  TT  (1  -  f  J.  Since  each 
j=l  ^  J=r+1  J 

fj  is  increasing,  and  are  increasing*  By  Theorem  3.1 

E(Fj^F2)  >  E(F^)-E(F2)  or  equivalently  E(1  -  Fj^)(l  -  F2)  >  E(1  -  F^)-E(l  -  F2) 
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or  equivalently  P[F^  =  0|  =  0]  >  P[F^  =  0]*p[F2  =  0]* 

Repeated  application  of  Lemma  4,1  yields 
Lemma  4,2 

Under  the  same  hypothesis  as  in  Lemma  4,1, 

m 

(4.3)  PCf^  =  0, .  f  =  0]  >  TT  P[f,  =  0]. 

^  ^  m  j  J 

Lemma  4,3 

Let  X  ,x  , ,,.,x  be  independent  binary  variables.  Define 
Id  n 

f.«(x)  =  TT  X.,  where  A.  is  a  subset  of  {l,2,,,,,n]  ,  j  =  l,2,,.,,r, 

leAj  J 

A  sufficient  condition  that  each  x.  such  that  icA.  for  some  j  be 

1  J 

essential  to 


F  =  1  -  TT  (1  -  f J 

j=i  ^ 

is  that  no  one  of  the  sets  A^  should  be  wholly  included  in  any  other. 


Proof 


Consider  some  x^  ,  ^  ^  ^0 


0  Jr 


(0) 


1  if  ieA 

Jq 

0  otherwise 


For  j  /  j  ,  A.  -  A.  is  not  empty  so  that  f  (x.  =  0.  Thus 

'J  J  Jq  J  ^0  ~ 


(0) 


(0) 


Ox 


F(x,  ,x  )  =  1  -  f  (x.  ,x  )  =  1  -  X.  .  Then  F(l.  ,x  )  =  1,  F(0.  ,x  )  =  0 
-  .1^  “ 


^0  0 
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which  shows  x.  to  be  essential  to  F. 

^0 

Remark 

If  as  considered  in  the  hypothesis  of  Lemmas  4.1 

X  c  Dl 

eind  4,2  satisfy  the  condition  that  no  one  of  them  is  a  subset  of  smother 

and  if  there  is  at  least  one  such  that  i  is  an  element  of  at 

least  two  of  the  sets  A.,  then  with  respect  to  Lemma  4,1  there  is 

J 

an  r  for  which  x.  is  essentiail  to  the  functions  F.  and 
defined  in  the  proof.  Then  the  inequality  obtained  in  Lemma  4,1  is  a 
strict  inequality  for  that  r,  and  consequently  the  inequality  obtained 
in  Lemma  4.2  is  also  strict. 

Every  coherent  system  has  a  finite  number  of  minimal  paths,  i.e. 
vectors  z  for  which  ^)(z)  =  1  auid  such  that  if  x  ^  then  ^)(x)  =  0 

From  a  more  physical  point  of  view  the  elements  of  z  which  are  I's 
correspond  to  a  smallest  set  of  components  which  by  functioning  cause 
the  system  to  function.  Let  us  call  the  set  of  components  indicated 
by  the  unit  elements  of  a  minimal  path  a  minimal  path  set.  Since 
the  system  functions  if,  and  only  if,  all  the  components  in  at  least 
one  of  the  minimal  path  sets  function,  a  representation  of  the  system 
is  obtained  by  imagining  that  the  components  of  each  minimal  path  set 
act  in  series  and  that  the  minimal  path  subsystems  so  obtained  act  in 
parallel.  In  such  a  representation  of  the  system  the  same  component 
may  occur  in  more  than  one  minimal  path  set  making  it  necessary  to 
suppose  some  deus-ex-machina  which  causes  all  replications  of  the  same 
component  to  function  or  fail  simultaineously .  It  is  plausible  that  if 
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in  the  representation  each  replica  of  the  same  component  were  replaced 
by  an  independently  operating  component  of  the  same  reliability,  there 
would  be  an  increased  chance  that  the  components  of  some  minimal  path 
set  would  all  function.  Thus  a  computation  of  reliability  which  treats 
the  system  as  a  set  of  indepenaent  minimed  paths  acting  in  parallel 
should  furnish  an  upper  bound  on  actual  system  reliability. 

Similarly  every  coherent  system  has  a  finite  number  of  minimal 
cute,  i,e,  vectors  ^  for  which  0(jr)  =  0  and  such  that  if  x  ^ 
then  i)(x)  =  1.  The  set  of  components  corresponding  to  the  elements 
of  a  minimal  cut  which  are  0*s  is  a  smallest  set  of  components  which 
by  all  failing  cause  the  structure  to  fail;  we  call  such  a  set  a 
minimal  cut  set.  Since  the  system  functions  unless  all  the  components 
of  some  minimal  cut  set  fail,  it  can  be  represented  as  one  in  which 
the  components  of  each  minimal  cut  set  act  in  paradlel  and  the  minimal 
cut  subsystems  so  obtained  act  in  series.  In  this  representation  it 
is  plausible  that  if  the  components  which  occur  in  more  than  one 
minimal  cut  were  replaced  in  each  occurrence  by  independently  operating 
components  of  the  same  reliability,  there  would  be  an  increased  chance 
for  all  components  of  some  minimal  cut  to  fail,  and  that  a  computation 
of  reliability  which  treats  the  system  as  a  set  of  independently 
operating  minimal  cuts  acting  in  series  would  give  a  lower  bound  on 
actual  system  reliability. 

Theorem  4,1 

Let  0  be  the  structure  function  of  a  coherent  system  with 
independent  components,  not  necessarily  of  identical  reliability. 
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Define 

!1  if  all  components  of  the  j  minimal  path  set  function 

0  otherwise 

for  j  =  lf2f«yay  where  a  is  the  number  of  minimal  paths  of  and 

iO  if  all  components  of  the  minimal  cut  set  fail 

1  otherwise 

for  k  =  where  b  is  the  number  of  minimal  cuts  of  ^),  Then 

b  a 

(4.3)  IT  =  1]  <  PC<)  =  1]  <  1  -  IT  (1  -  PCa.  =  1]). 

k=l  “  j=l  J 

Proof 

Let  A^^A^te.e^A^  be  the  minimal  path  sets  of  the  system.  Then 
a  (X)  =  IT  X  .  j  =  1,2 . a. 

leAj 

Since  0  =  0  if,  and  only  if,  a-  =  =  0,...,a  =0  we  have 

from  Lemma  4.2 

a 

PC<)  =  0]  >  TTPCa  =  0] 

”j=l  ^ 

or  equivalently 

a 

p[<)  =  1]  <  1  -  TT(1  -  PCa  =  1). 

J=1  ^ 

Let  be  the  minimal  cut  sets  of  the  system.  Then 

p  (X)  =  1  -  TT  (1  -  X  ),  k  =  1,2, 

^  icB,  ^ 

k 
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Define  0^=  1  -  X^,  i  =  l,2,...,n,  f =  1  •  and  F  =  1  -  4),  Then 

f  (X)  =  TT  , 

i.Bk 

and  since  ^  =  1  if,  and  only  if,  =  1,^2  =  1|  •  •  •  =  1  or 

equivalently  F  =  0  if,  and  only  if,  f^  =  0,f2  =  0, . . . ,f^  =  0  we  have 

b 

PCF  =  0]  >  TT  P[f,  =  0] 


k=l 


or  equivailently 


PC<)  =  1]  >  ft  PCP^  =  1]. 

”k=l 


Remark 


The  minimal  path  sets  A2, .  • . ,  satisfy  the  condition  that 

no  one  of  them  is  a  subset  of  ainother  as  a  consequence  of  their  definition. 

It  follows  that  if  there  is  any  overlap  between  minimal  path  sets,  i.e,, 

the  same  component  occurring  in  two  or  more  sets,  and  if  0  <  p^  1, 

i  =  l,,.,,n,  then  the  right  hand  side  of  (4.3)  is  a  strict  inequality. 

If  there  is  no  overlap,  i.e,  the  minimad  path  sets  are  disjoint,  then 

the  functions  a. ,a»,.«.,a  aure  independent  and  equality  is  obtained. 

X  £  a 

The  same  criterion  applied  to  minimal  cut  sets  distinguishes  between 
strict  inequality  and  equality  on  the  left  side  of  (4.3). 

Example  4.1 

The  diagram  in  Figure  4.1  represents  a  coherent  syotem  having 


seven  components. 


Figure  4*1 


Ab  may  be  readily  determined  by  inspection,  the  system  has  the  minimal 

path  sets  16,73,  ll,2,3J,  {1,4,73,  {3,5,63,  {1,3,4,53,  {1,2,5,73, 
12,3,4,6],  and  the  minimal  cut  sets  {l,63,  {3,73,  {2,4,63,  {2,5,73, 
{1,4,5,73,  {3,4,5,63.  From  the  remark  preceding  Theorem  4,1  (edso 
see  [1»  Section  2,7.7])  the  structure  function  of  the  system  may  be 
found  by  writing 


®1 

"  *6'‘7 

=  1  -  (1-X^)(l-Xg) 

o.. 

=  X  X  X 

P-,  =  1  -  (1-X_)(l-X_) 

2 

123 

2  3  7 

“3 

=  Xj^X^X^ 

P,  =  1  -  (1-x  )(1-X  )(1-X-) 

3  2  4  6 

“4 

P^  =  1  -  (l-X2)(l-x^)(l-x^) 

“5 

= 

P^  =  1  -  (1-X^)(l-X^)(l-X^)(l-X.j,) 

“6 

=  x^x^x^x^ 

P,  =  1  -  (1-x  )( 1-x  )( 1-x,.) (1-x,) 
6  3  4  5  0 

“7 

= 

and  using  either  of  the  representations 

7  6 

<)  r:  1  -  TT  (1  -  a  )  =  TT  P, 

j=l  ^  k=l 


(4.4) 
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The  computation  of  the  actual  system  reliability  function  by  tadcing 
the  expectation  of  ^  in  (4.4)  is  somewhat  tedious.  In  this  case 
the  result  is  too  long  an  expression  to  be  given  here.  On  the  other 
hemd  the  upper  amd  lower  bounds  of  (4,3)  can  be  readily  obtained 
since 


PrCa .  =  1]  =  IT  P. ,  PrCp.  =  1]  =  1  -  TT  (1  -  p. )  . 

J  ieA,  ^  ^ 

Figure  4.2  is  a  plot  of  the  actuad  reliability  function  and  the 
bounding  functions  in  the  case  p^  =  p,  i  =  l,2,...,n,  and  furnishes 
aui  indication  of  the  precision  of  the  bounds. 


SYSTEM  RELIABILITY,  h(p) 


16 


0.0  .2  .4  .6  .8  1.0 


COMPONENT  RELIABILITY,  p 


3oui;dj  o:;  system  reliability  babed 
0?;  MILIMAL  PATHS  AI'D  MILIMAL  CUTS 

FOR  seve;-compoi:q:t  system 


r injure  4.2 
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3,  Generalization  of  some  properties  of  coherent  structures  to 
the  caae  of  componenta  with  non-ldenticcU.  reliabilities, 

A  niamber  of  interesting  properties  of  coherent  structures  whose 
components  have  identical  reliabilities  were  established  in  [1].  We 
shall  prove  some  of  these  properties  vetlid  for  coherent  structures 
whose  components  do  not  have  identical  reliabilities  and  present  some 
additionad  results  for  this  case. 

Theorem  5.1 

Let  be  independent  binary  random  variables.  Let 

f(x)  be  increasing.  Then 

cov[f(X),X^]  >0,  i  =  1,2, ...,n. 

If  in  addition  0  <  p.  <  1,  j  =  l,2,...,n  and  x.  is  essential  to 

3 

f,  then 

cov[f(p,X.]  >  0. 

Proof 


Since  the  function  of  x  identically  equal  to  is  increasing 

the  result  follows  from  Theorem  3.1  and  its  corollary. 

The  representation  of  Lemma  3.1  gives  in  the  present  case 


(5.1) 


cov[f(X),X^]  =  •  E[f(l^,X)  -  f(0^,X)] 
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From  (3.2) 

dh(p)  aEf(X) 

(5.2)  -5~  =  -5^  =  E[f(l^,P  -  f(0.  ,X)] 
so  that 

dEf(X) 

(5.3)  cov[f(p,X^]  =  -g”  . 

Thus,  assuming  0  <  p^  <  1,  a  necessary  and  sufficient  condition  that 
>0  at  p  =  (P2^»P2»  •  •  •  tPjj)  thsit  cov[f,X^]  >  0  at  the  same  p. 

If  is  a  structure  function,  then  the  function  h(p)  =  E[^(X)|p] 

is  the  structural  reliability  corresponding  to  component  reliabilities 

p.  If  represents  a  semi-coherent  structure,  ^  is  increasing,  so 
dh 

that  ^  =  l,2,.,.,n.  The  partial  derivative  of  structurad 

reliability  with  respect  to  a  component  reliability  is  identicadly 
zero  if  the  component  is  not  essential  to  the  structure  and,  on  the 
interior  of  the  space  of  component  reliabilities,  strictly  positive 
if  the  component  is  essential. 

Theorem  3*2 

Let  X^,X2,a..,X^  be  independent  binary  random  variables.  Let 
f(x)  be  increasing.  Then 

cov[f(X),S(X)]  >  0, 
n 

where  S(x)  =  Z  x. , 
i=l  ^ 
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Proof 


Since 

n 

cov[f,S]  =  Z  cov[f,X.] 
i=l  ^ 

the  result  follows  immediately  from  Theorem  5.1. 

We  define  a  function  f(X)  of  n  binary  rsoidom  variables 
to  be  increasing  in  expectation  if 

E[f(X)lS(p  =  k  +  1]  >  E[f(plS(p  =  k],  k  =  0,1,..., n-1, 
n 

where  S(x)  =  Z  x. . 

i=l  ^ 

This  definition  extends  the  definition  given  in  [1]  of  a  structure 
function  i)  semi-coherent  in  probability  if 

PC<)  =  llS  =  k  +  1]  >  PC<)  =  lls  =  k],  k  =  Oa,...,n-l. 

Theorem  5.3 

Let  X^,X2,...,X^  be  independent  binary  random  variables.  Let 
f(x)  be  an  increasing  function.  Then  f(X)  is  increasing  in 
expectation. 

Proof 

We  shall  use  induction  to  prove  f  increasing  in  expectation. 
For  n  =  1  we  need  E(f|S  =  1)  ^  E(f|S  =0),  or  equivalently 
f(l)  >  f(0). 


20 


Now  assume  that  f  Increasing  implies  that  f  is  increasing 


in  expectation  for  functions  of  order  n  -  1,  Define 


n 

T  (X)  =  Z  X,. 

j/i 


Then 


E[f(p|S(X)  =  k]  =  E[f(l^,p|T^(p  =  k  -  1]  •  P[X^  =  l|S(p  =  k] 

+  E[f(0^,p|T^(X)  =  k]  •  P[X^  =  0|S(X)  =  k]. 

Thus  with  the  addition  and  subtraction  of  suitable  terms ,  we  may  write 
ECfIs  =  k  1]  -  E[f|S  =  k] 

=  PCXj^  =  l|S  =  k]  •  {E[f(l^,X)|T^  =  k]  -  E[f(l^,p|T^  =  k  -1]} 

+  P[X^  =  0|S  =  k  +  1]  .  {E[f(0^,p|T^  =  k  ♦  1]  -  E[f(0^,p|T^  =  k]} 

+  E[f(l^,X)lS  =  k]  •  {P[X^  =  llS  =  k  ♦  1]  -  P[X^  =  l|S  =  k]} 

+  E[f(0^,X)|S  =  k]  •  {P[X^  =  0|S  =  k  +  1]  -  P[X^  =  OlS  =  k]} 

By  inductive  hypothesis 

E[f(l^,X)|T^  =  k]  >  E[f(l^,p|Tj^=  k  -  1] 

and 

E[f(0. ,X)|T.  =  k  +  1]  >  E[f(0. ,X)|T.  =  k]. 

1  ~  1  “  1  “  1 

Also 


PlX^  =  lls  =  k  +  1]  -  ppc^  =  lls  k]  =  prx^  =  0|S  ^  k]  -  P[X^  =  OlS  =  k  1] 
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Thus  we  need  only  prove: 

(a)  E[f(l^,X)lS  =  k]  >  E[f(0^,X)|S  =  k] 

(b)  P[X^  =  llS  =  k  +  1]  >  PCX^  =  l|S  =  k] 

To  show  (a)  simply  write 

ECf(l^,X)lS  =  k]  -ECf(0^,X)lS  =  k] 

=  E[f(l^,p  -  f(0^,X)lS  =  k]  >  0, 

since  f(l^,x)  >  f(0^,x).  Note  that  (b)  is  equivalent  to 

p.PCT.  =  k]  p.PCT.  =  k  -  1] 

1 _  ^  1 _ 

PCS  =  k  +  1]  "  PCS  =  k] 

Using  the  expansion 

PCS  =  k]  =  P^PCT.  =  k  -  1]  >  (1  -  p^)PCT^  =  k] 

(b)  becomes  equivalent  to 

{P[T^  =  k]}^  >  P[T^  =  k  +  1]  •  P[T^  =  k  -  1]. 

This  last  inequality  holds  since  the  convolution  of  binomial 

random  variables,  has  a  monotone  likelihood  ratio« 

Theorem  5.3  contains  the  result  that  when  components  are  independent 

a  semi-coherent  structure  ^  is  semi-coherent  in  probability  for  any 

set  of  component  reliabilities  Pt,P-ni...,P  .  That  a  coherent  structure 

1  £1  n 

^  coherent  in  probability^  i.e.  semi-coherent  in  probability  and 
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such  that  P(^  =  l|S  =  n)  =  1,  P(^  =  OlS  =  0)  =  1  follows  immediately 
from  the  additional  properties  of  coherent  structures  ^(1)  =  1,  ^(0)  =  0, 

Theorem  5»4 

Let  be  independent  binary  random  variables.  Let 

f(X)  be  increasing  in  expectation  at  p^,P2i  •  •  •  Then 

cov[f(X),S(p]  >  0 


at 


Proof 


Let  F(k)  =  E[f(X)lS  =  k] ,  k  =  0,1,2, and  gW  =  FCS(X)]. 
Then  f  increasing  in  expectation  implies  g  increasing  so  that 
cov[g,S]  >0  by  Theorem  3.1*  Since 


ECg(X)]  =  E  ECf|S  =  k]  •  PCS  =  k]  =  ECf] 
k=0 


auid 


n 

ECg(X)S(X)]  =  E  kE[f|S  =  k]  •  P[S  =  k] 
k=0 

n 

=  E  ECfSlS  =  k]  .  PCS  =  k]  =  ECfS], 
k=0 


we  have 


covCf,S]  =  ECfS]  -  ECf]  •  ECS]  =  ECgS]  -  ECg]  ‘  ECS] 
=  covCg,S]  >  0. 


23 


Remark 

Under  the  hypotheses  that  X,,X  , ...,X  are  independent  binary 

X  c  n 

random  variables  and  0<p^  <  1,  i  =  if  4)(X)  xs  a 

structure  function  neither  identically  zero  nor  identicadly  one,  there 
is  no  difficulty  in  defining  the  mean  path  and  the  mean  cut  of  ^ 
by,  respectively 

P(p)  =  E[S|<t)  =  1]  = 

C(p)  =  E[n  -  S|<)  =  0]  =  • 

As  shown  on  [1],  it  is  then  immediate  that 
P(p)  +  C(p)=  n  + 

In  this  context  the  condition  cov[t),S]  >0  is  equivalent  to 
P(p)  C(p)  >  n. 

Theorem  5.5 

Let  be  independent  binary  random  variables  and 

f(X)  be  a  function  such  that  any  one  of  th  properties 

(a)  covCf(X),S(X)]  >  0 

(b)  cov[f(X),X^]  >  0  for  each  i  =  l,2,.,.,n 

(c)  f  is  increasing  in  expectation 

holds  for  every  choice  of  P2»P2’***’Pn  which  0  <  p^  <  1, 

i  =  l,2,...,n.  Then  f  is  increasing. 
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Proof 

Note  that  (b)  implies  (a)  since 

n 

cov[f(X),S(X)]  =  E  cov[f(X),X  ], 

"  "  i=l  ^ 

and  (c)  implies  (a)  by  Theorem  5.4.  Thus  it  remains  to  show  that  (a) 
implies  that  f  is  increasing. 

Now  f  is  increasing  if,  and  only  if,  f  is  increasing  in  each 
coordinate,  i.e,,  f(l^,x)  >  f(o^,x)  for  all  i  and  (v,x).  Suppose 

f  is  not  increasing.  Then  there  is  on  i  and  a  vector  such 

that  f(l^,x^)  <  f(0^,x^).  For  j  =  l,2,...,n;  j  /  i,  let 


From  Lemma  3.I 

covCf(X),X  ]  =  p  q  •  E[f(l  ,X)  .  f(0  ,X)]. 

u  J  J  j 

Since  for  each  j  =  l,2,,..,n 

E[f(l,,X)  -  f(0,,X)]  <  o.  .max  {f(l,,x)  -  f(0.,x)}  <  <d, 
J”  J~  ^ 

we  liave 

cov[f(X),X  ]  <  p  q  •  o  -  O,  j  ^  i. 

J  J  J  J 


Effd^.X)  -  f(0^,X)]  <  {f(l^,x°)  -  f(0^,x°)}  P(v,x°) 

+  a^Cl  -  P( 


Also 
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where 

P(*. |X®)  =  TT  Pr[X  =  X®],  so  that 
^  ~  k=l  J  J 
K^i 

cov[f(p,X^]  •  {f(l^,x°)  -  f(0^,x°)}. 

Thus,  since  ^  0  cov[f,S]  >  0  during  the  limiting  process, 

we  show  f(l^,x^)  >  f(0^,x^)  and  nave  a  contradiction. 
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6.  The  multivariate  Moore«»Sh6Uinon  inequaility 
The  univariate  Moore-Shannon  inequsdity 

(6.1)  p(l  -  >  h(p)Cl  -  h(p)] 

compares  structured  reliability  h(p)  with  component  reliability  p 
in  the  case  of  semi-coherent  systems  whose  components  are  of  identiced 
reliability.  The  inequality  is  strict  except  when  h(p)  s  0,  h(p)  =  1, 
or  h(p)  =  p.  It  is  derived  for  two-terminal  networks  in  [3]  and  for 
coherent  structures  in  [1],  The  inequality  is  the  principal  tool  in 
the  demonstration  of  the  S-shaped  relationship  between  structural 
reliability  and  component  reliability.  We  shall  obtain  a  multivariate 
generalization,  directly  from  Theorem  3.1,  which  permits  a  much 
simplified  proof  of  the  S-shapedness  result. 

We  will  need 

Theorem  6,1 

Let  X^,X2,...,X^  be  independent  binary  random  variables  such 
that  0  <  p^  <  1,  i  =  l,2,.,.,n.  Let  ^)(x)  t)e  the  structure  function 
of  a  coherent  structure  having  at  least  two  essential  components.  Then 

cov[<)(X),S(X)  -  <)(X)]  >  0, 
n 

where  S(x)  =  E  x.  . 

■  i=i " 
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Proof 

To  apply  Theorem  J.l  and  its  corollary  we  must  show  first  that 
S  -  ^  is  increasing  and  second  that  ^  and  S  -  ^  have  an  essential 
in  common. 

To  show  S  -  increasing  is  to  show  that  for  each  vector 
S(l^,x)  -  4)(l^,x)  >  S(0^,x)  -  <|)(0^,x) 
which  is  equivalent  to 


1  >  0(1., x)  -  0(0^, x)t 


a  statement  which  follows  immediately  from  the  properties  of  0, 


To  show  that  0  and  S  -  0  have  am  essential  x.  in  common 

1 

suppose  that  x^,  x^  are  essential  to  0,  and  that  neither  x^  or 
Xj  is  essential  to  S  -  0*  Then 

S(l^,x)  -  <)(l^,x)  =  S(0^,x)  =  0(0^, x),  all  (v,x). 

S(1  ,x)  -  =  S(0.,x)  -  <)(0.,x),  all  (•.,x). 

j  J  3  J  3 


Thus 


<)(l^,x)  -  <)(0^,x)  =  1,  all 


<)(1  x)  -  x)  -  1,  all  (•  ,x), 

J  J 


which  implies 

(t)(l^,x)  =  1 

<t)(l.,x)  =  1 

J 


<)(0^,x)  =  0 
0(0  x)  =  0. 
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But  a  contradiction  arises  from  the  consideration  of 


or 


We  can  now  prove  the  deaired  generedization  of  the  Moore-Shannon 
inequality; 


Theorem  6 >2 


Let  X  ,  ,,.,X  be  independent  binairy  random  variables  such 
±  d  n 

that  0  <  p^  <  1,  i  =  l,2,,..,n.  Let  ^(x)  be  the  structure  function 
of  a  coherent  structure  such  that  i)(x)  ^  x,  for  i  =  l,2,,.*,n.  Then 
n  dh(p) 

E  p.(l  -  p.)  - =-  >  h(p)[l  -  h(p)], 

i=l  ^  dp. 

where  h(p)  =  E[4)(p|p]. 

Proof 

By  hypothesis,  ^  hats  at  least  two  essential  components.  The 
inequality  of  Theorem  6.1  can  be  rewritten  as 
n 

(6.2)  E  cov[<),X.]  =  cov[^,S]  >  E[^]fl  -  E[4)]}, 
i=l 

Since  h  =  E[^)]  and  from  (5.3) 

(6.3)  cov[(),X^]  =  p^(l  -  p^)  , 

the  result  follows. 


We  refer  to  the  result  of  Theorem  6.2  as  the  multivariate 
Moore-Shannon  inequality.  It  is  clearly  valid,  but  without  strict 
inequality,  wnen  ^)  =  0,  ^  =  1,  or  ()  =  x^. 
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Application  to  S-shapedness 


Let  ^(x)  be  a  coherent  structure  function  and  h(p)  be  the 
corresponding  structural  reliability  function.  Assume  that  all 
components  have  identical  reliability,  i.e.,  =  P»  i  =  l,2,...,n. 


SO  that  by  Theorem  6.2 


p(l  -  .  E  p.(l  -  p.  >  h(l  -  h),  0  <  p  <  1, 

^  i=l  ^i 

unless  0  =  x^  for  some  i.  Thus  except  for  the  three  exceptional 
cases  if  hCp^)  =  p^,  0  <  p^  <  1,  then  ^  >  1  at  p^.  It  follows 
that  the  curve  h(p)  can  cross  the  diagonal  p  only  from  below,  if 
it  crosses  at  all. 


From  (5.2) 


-  Ko.,0) 

1  p=0 


1  if  (1^,0)  is  a  path  of  the  structure 


0  otherwise 


.  (  1  if  (0.  , 

7-  =  4)(li»l)  -  4)(o.,i)  =  { 

i  p-1  (  0  otherwise 


1)  is  a  cut  of  the  structure 


It  follows  that  if  no  minimal  path  set  or  minimal  cut  set  of  the  structure 

dh 

consists  of  just  one  component,  ^  ^  p  =  0  aind  p  =  1,  Then 

h(p)  must  cross  the  diagonal  p  at  least  once  (from  below)  and  can 


cross  only  once, 
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If  some  one  component  is  a  **minimal  path”,  then  clearly  the  structure 
is  more  reliable  than  that  component,  i.e.,  h(p)>p,  0<p<l.  If 

some  one  component  is  a  ^minimal  cut”  then  the  structure  is  less  reliable 
than  that  component,  i.e.,  h(p)  £  p,  0  <  p  <  1  (see  [3]$  [1]).  Thus, 
in  these  cases  h(p)  does  not  cross  the  diagonal  at  all. 


Quite  often  one  wamts  to  study  the  changing  relationship  between 
structural  reliability  and  component  reliablities  when  component 
reliabilities  vary  as  a  function  of  some  parameter.  One  case  of  this 
is  the  S-shapedness  relationship  just  considered,  where  =  Pi 

i  =  l,2,,..,n,  0  <  p  <  1.  Another  is  the  common  situation  in  which  each 

component  reliability  is  supposed  to  be  a  decreatsing  function 
the  accumulated  operating  time  t  of  the  system,  0  <  t  <  00,  In  problems 
of  reliability  growth  one  might  want  to  treat  each  component  reliability 
as  an  increasing  function  of  a  parameter  representing  development  effort 
or  expenditure.  The  following  theorem  gives  one  way  of  writing  the 
Moore-Shannon  inequality  in  such  situations. 

Theorem  6,3 


Let  X^,X2,...,X^  be  independent  binary  raindom  variables.  Let 

(|)(x)  be  a  coherent  structure  function  such  that  ()(x)  ^ 

i  =  l,2,.,.,n.  Suppose  for  -cd  <  a  <  \i  <  b  <  (r\  p.  (u)  =  PCX.  =  l|p] 

dPi  “  ~  dh  ^ 

is  such  that  —  exists,  i  =  l,2,...,n.  Then  —  exists,  a  < 

d\i  1111  1  1 

and  for  a  <  y.  <  b,  0<p.(>i)  ^1,  i  -  1,2, ..,n  , 


dh/du  . 

hii-  hy  T(i  -T")  ’ 

cov[<)(X),Xjp] 
cov[(t)(X),S(X)|p] 


cov[<)(X),X^lp]  n 

'  covCjKb.sTxpvI  =  1- 
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Proof 


Write 

dh  ”  ah  .  ^  ”  8h  . 

du  5^  du  Pi^i  5^  * 

Thus,  using  (5.3), 


Hv,  dp  /dii 

—  =  E  covC4>,X.]  •  . 

i=i  ‘  Pi’i 

Dividing  by,  respectively,  the  two  sides  of  (6,2)  gives 

dh/du  .  g  .  dp./dp 

h(l  -  h)  cov[<),S]  p^q^  * 

We  use  Theorem  6.3  to  obtain  S-shapedness  results  in  the  case 
of  components  of  differing  reliabilities,  Specificadly : 


Theorem  6,4 

Let  p^Cu)  satisfy  for  i  =  l,2,...,n 

p'.(u)  , 

p.(p)tl  -  p^(p)]  -  p(l  -  p)  ’ 

and  let  h[p(u)]  be  the  reliability  function  of  a  coherent  structure 
such  that  ^(x)  ^  for  i  =  l,2,..,,n.  Then 


(6.4) 


dh/du  >  1 

h(l  -  h)  u(l  -  u) 


0  <  u  <  1. 


(6.4)  implies  that  h[p(u)]  crosses  the  diagonal  at  most  once. 


32 


Proof 


For  0  <  u  <  1, 


"ifi ' 

the  first  inequality  follows  from  Theor'^m  6.3,  the  second  by  hypothesis. 

n 

The  final  equality  is  a  consequence  of  the  fact  that  E  c.(p)  =  1,  the 

i=l 

cA)i)  being  defined  in  Theorem  6,3. 


P’  (u) 


We  can  go  a  step  further}  we  can  state  conditions  under  which 
hCpCv-)]  actuailly  does  cross  the  diagonal  Q  precisely  once. 


Corollairy 

Assume  p^(u)  satisfies  (6.3)  and  that  p^(u)  actually  crosses 
the  diagonal  once  for  i  =  l,2,..,,n.  Assume  further  that  h(p)  is 
the  reliability  function  of  a  coherent  structure  such  that  0(x)  ^ 
for  i  =  l,2,...,n  and  that  h(p)  actually  crosses  the  diagonal  exactly 
once.  Then  h[p(u)]  crosses  the  diagonal  exactly  once. 

Proof 


For  sufficiently  close  to  0,  each  ^  so  that 

h[p(u)]  <  h(u)  ^  U. 

Similarly  for  u  sufficiently  close  to  1,  each  p^(u)  ^  V-^  so  that 
h[p(>i)]  ^  h(>i)  >  VL. 

Thus  h[p(vi)]  crosses  the  diagonal  at  least  once.  Since  we  know 
from  Theorem  6,4  that  h[p(v-)]  crosses  the  diagonal  at  most  once, 


the  conclusion  follows « 
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